Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
File: _qLamRGzG_Ww1hSRL9v5W_HXA1s.mft (raw, json)
Hash identifier: +pFb9BrdcMuxDbwdp2bnceCwMvrRWE/X/9/v8tPwO3M=
Subject key identifier: 51:67:3A:97:AB:68:FC:95:46:EE:1D:6C:F5:50:BD:84:35:23:3F:25
Authority key identifier: FE:A2:DA:99:11:B3:1B:F5:B0:D6:14:91:2F:DB:F9:5B:F1:D7:03:5B
Certificate issuer: /CN=fea2da9911b31bf5b0d614912fdbf95bf1d7035b
Certificate serial: 019610207B0BBFEDB13EC81C80D3B58C9C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qLamRGzG_Ww1hSRL9v5W_HXA1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
Manifest number: 0483
Signing time: Mon 07 Apr 2025 12:01:26 +0000
Manifest this update: Mon 07 Apr 2025 12:01:26 +0000
Manifest next update: Tue 08 Apr 2025 12:01:26 +0000
Files and hashes: 1: LVji7-hNinMvh2uZfU9itRxK6Eo.roa (hash: yz8p8NyEKPeKdywG9T51h7CGBtQCcml/qAuFdNgc+wQ=)
2: _qLamRGzG_Ww1hSRL9v5W_HXA1s.crl (hash: lYbC/z+WKJZ6cWyMv78yCBMWaSDOzVQEtwHBV+rO9Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qLamRGzG_Ww1hSRL9v5W_HXA1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:7b:0b:bf:ed:b1:3e:c8:1c:80:d3:b5:8c:9c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea2da9911b31bf5b0d614912fdbf95bf1d7035b
Validity
Not Before: Apr 7 12:01:26 2025 GMT
Not After : Apr 8 12:01:26 2025 GMT
Subject: CN=51673a97ab68fc9546ee1d6cf550bd8435233f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:0e:e6:58:70:5d:0e:89:f2:a8:98:e0:95:
86:4c:e5:29:e5:e1:25:11:25:7a:87:bf:dd:ea:44:
09:f0:8e:3d:12:a4:4d:58:c0:78:66:64:d2:5a:ff:
b8:6e:a8:5e:c4:c7:d5:94:11:02:11:51:c4:b6:94:
16:3d:89:35:39:20:25:5a:ff:a8:21:f0:96:ed:8d:
e3:44:1e:bb:48:4a:60:79:70:83:94:d5:33:fc:3e:
6f:7e:89:2f:bd:38:84:22:a6:00:79:65:fe:16:90:
06:78:05:49:28:fc:19:ed:a2:45:03:c9:f9:95:37:
51:b9:48:38:7b:b4:8c:7f:07:2d:43:e8:46:90:e6:
48:5e:6d:6d:bc:ab:bf:aa:f0:f6:e3:03:3d:1b:7f:
eb:50:5f:cc:01:da:aa:bf:10:39:2d:6a:b7:77:2b:
5d:73:4f:ce:14:d8:a1:90:11:ef:44:9c:19:6c:5a:
ef:5c:4e:aa:31:6e:1b:9e:f7:70:52:1c:8d:19:25:
99:51:e3:ba:69:06:61:0e:20:50:84:7d:37:d0:88:
b9:05:26:1f:de:45:8a:68:64:b1:a6:e9:10:68:cf:
ac:8a:0b:0c:a7:ce:0b:a5:72:44:e5:a0:06:75:68:
0c:cb:9e:b6:04:76:71:e6:c5:4c:02:fe:33:51:da:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:67:3A:97:AB:68:FC:95:46:EE:1D:6C:F5:50:BD:84:35:23:3F:25
X509v3 Authority Key Identifier:
keyid:FE:A2:DA:99:11:B3:1B:F5:B0:D6:14:91:2F:DB:F9:5B:F1:D7:03:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qLamRGzG_Ww1hSRL9v5W_HXA1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4e:93:e2:a2:d5:1c:2e:e4:e7:56:4f:0f:ee:9a:80:f4:67:
68:dd:d9:6f:e4:ae:c6:92:2c:07:00:61:15:44:95:a6:fb:00:
f7:85:a3:7d:17:e0:0f:8f:c7:3e:b0:52:f0:77:da:9e:0c:64:
a3:39:de:bd:c4:76:66:eb:80:91:2a:8a:40:00:e3:af:57:80:
87:d2:2f:d6:d9:6f:37:14:9c:48:b5:6f:ab:b8:fe:24:b6:47:
c5:6c:71:d9:b3:e6:c7:55:c8:d6:b2:b8:b6:91:6c:68:c6:27:
06:16:d9:c5:fd:72:67:83:2b:0c:ce:85:32:5e:59:28:c5:03:
42:47:ba:fe:b9:8e:2e:a3:9d:38:b0:46:71:aa:ad:3f:d9:30:
b5:a9:72:13:44:51:82:cf:dc:8b:84:47:ac:d4:6f:12:28:02:
82:b4:6b:74:6f:1f:9a:1a:6b:9a:b1:ec:7a:5d:61:1a:50:bd:
c7:9f:a3:ed:3c:29:7c:cd:73:4a:a6:e5:c3:83:92:ee:ed:aa:
fb:91:02:6b:30:f9:5e:66:22:73:97:3e:a9:30:54:fe:2d:b9:
ab:1e:2b:0a:fa:c2:1e:7d:9d:27:c7:29:be:2a:55:66:de:de:
5d:5e:b4:e0:c8:81:cf:cc:8c:52:f9:51:f6:ab:16:0e:a4:05:
fa:8d:14:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:05 2025 by rpki-client